Back to skill
Skillv1.0.0

ClawScan security

MIT · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

Scanner verdict

BenignApr 29, 2026, 10:07 PM
Verdict
benign
Confidence
high
Model
gpt-5-mini
Summary
This is an instruction-only informational skill about MIT; it requests no credentials, installs nothing, and its instructions are limited to presenting background content — behavior is coherent with its stated purpose.
Guidance
This skill is a read-only informational piece about MIT and appears low-risk: it asks for no credentials and installs nothing. Two practical cautions: (1) provenance is unknown (no homepage or source listed), so verify any critical facts against authoritative sources (MIT pages, published research) before relying on them; (2) the SKILL.md is static content in Chinese — if you expect dynamic or up-to-date data (e.g., current research funding, recent faculty), the skill may be out of date and you should prefer authoritative APIs or the official MIT website.

Review Dimensions

Purpose & Capability
okThe name/description (an MIT informational skill) matches the SKILL.md content. No binaries, env vars, or config paths are requested, which is proportionate for a read-only informational skill.
Instruction Scope
okSKILL.md contains static informational text and a short 'read_when' list indicating topics to present. It does not instruct the agent to access unrelated files, credentials, or external endpoints directly.
Install Mechanism
okNo install spec or code files are present (instruction-only), so nothing is written to disk or fetched during installation.
Credentials
okThe skill declares no required environment variables, credentials, or config paths — this is appropriate for a content-only skill.
Persistence & Privilege
okThe skill does not request always:true and uses default invocation settings. It does not ask to modify other skills or system-wide settings.